CWE-270 · weakness in Access Control
Privilege Context Switching Error
24 CVEs · 1 exploited
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 1
- likely to be exploited
- 1
Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.
- The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system.…
- XWiki Platform vulnerable to Remote Code Execution in Annotations
- Apache Airflow: Privilege escalation using airflow logs
- XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro
- In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more pr…
- Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level Security is used. Search queries do not properly preserve security p…
- Microsoft Office SharePoint Elevation of Privilege Vulnerability
- Privilege Context Switching Error in GitLab
- A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability i…
- Privilege Context Switching Error in GitLab
- Aimeos denial of service vulnerability in SaaS and marketplace setups
- Windows Administrator Protection Elevation of Privilege Vulnerability
- It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and com.redhat.RHSM1.Config.Set methods. An…
- Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups
- FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes
- XWiki provides no warning when granting XWiki.Notifications.Code.NotificationEmailRendererClass admin right
- HTTP Client uses incorrect token after refresh in Duende.AccessTokenManagement.OpenIdConnect
- A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated u…
- Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability.
- arch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=y
- GPU DDK - rgxfw_write_robustness_buffer allows arbitrary catreg set mapping
- Under heavy system utilization a random race condition can occur during authentication or token refresh operation. This flaw allows one user to be granted a token intended for ano…
- A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a privileged Operator with high level access in one Division to perform limited privileged a…
- Userspace privilege escalation vulnerability on Cortex M
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.